In the Linux kernel, the following vulnerability has been resolved:
mm/gup: fix gup_pud_range() for dax
For dax pud, pud_huge() returns true on x86. So the function works as long as hugetlb is configured. However, dax doesn't depend on hugetlb. Commit 414fd080d125 ("mm/gup: fix gup_pmd_range() for dax") fixed devmap-backed huge PMDs, but missed devmap-backed huge PUDs. Fix this as well.
This fixes the below kernel panic:
general protection fault, probably for non-canonical address 0x69e7c000cc478: 0000 [#1] SMP < snip > Call Trace: <TASK> get_user_pages_fast+0x1f/0x40 iov_iter_get_pages+0xc6/0x3b0 ? mempool_alloc+0x5d/0x170 bio_iov_iter_get_pages+0x82/0x4e0 ? bvec_alloc+0x91/0xc0 ? bio_alloc_bioset+0x19a/0x2a0 blkdev_direct_IO+0x282/0x480 ? __io_complete_rw_common+0xc0/0xc0 ? filemap_range_has_page+0x82/0xc0 generic_file_direct_write+0x9d/0x1a0 ? inode_update_time+0x24/0x30 __generic_file_write_iter+0xbd/0x1e0 blkdev_write_iter+0xb4/0x150 ? io_import_iovec+0x8d/0x340 io_write+0xf9/0x300 io_issue_sqe+0x3c3/0x1d30 ? sysvec_reschedule_ipi+0x6c/0x80 __io_queue_sqe+0x33/0x240 ? fget+0x76/0xa0 io_submit_sqes+0xe6a/0x18d0 ? __fget_light+0xd1/0x100 __x64_sys_io_uring_enter+0x199/0x880 ? __context_tracking_enter+0x1f/0x70 ? irqentry_exit_to_user_mode+0x24/0x30 ? irqentry_exit+0x1d/0x30 ? __context_tracking_exit+0xe/0x70 do_syscall_64+0x3b/0x90 entry_SYSCALL_64_after_hwframe+0x61/0xcb RIP: 0033:0x7fc97c11a7be < snip > </TASK> ---[ end trace 48b2e0e67debcaeb ]--- RIP: 0010:internal_get_user_pages_fast+0x340/0x990 < snip > Kernel panic - not syncing: Fatal exception Kernel Offset: disabled
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Amazon Linux Ami 2 | — | Upgrade kernel-debuginfo-common-x86_64Upgrade python-perfUpgrade kernel-livepatch-5.15.86-53.137Upgrade kernel-headersUpgrade perf-debuginfoUpgrade python-perf-debuginfoUpgrade kernel-toolsUpgrade bpftoolUpgrade kernel-debuginfo-common-aarch64Upgrade kernel-tools-debuginfoUpgrade kernelUpgrade kernel-debuginfoUpgrade kernel-livepatch-5.10.162-141.675Upgrade kernel-develUpgrade kernel-tools-develUpgrade perfUpgrade bpftool-debuginfo | Mar 14, 2025 | Oct 21, 2024 |
| Debian | — | Upgrade linux | Oct 23, 2024 | Oct 23, 2024 |
| Redhat_linux | — | No solution exists | Jul 9, 2025 | Oct 21, 2024 |
| Ubuntu | — | Upgrade linux-image-lowlatency-hwe-16.04Upgrade linux-image-generic-hwe-16.04Upgrade linux-image-gcp-lts-18.04Upgrade linux-image-4.15.0-2126-aws-fipsUpgrade linux-image-azure-lts-18.04Upgrade linux-image-gkeUpgrade linux-image-virtual-hwe-16.04Upgrade linux-image-oracle-4.15Upgrade linux-image-aws-fips-4.15Upgrade linux-image-azure-edgeUpgrade linux-image-virtualUpgrade linux-image-gcpUpgrade linux-image-aws-lts-18.04Upgrade linux-image-4.15.0-1181-gcpUpgrade linux-image-genericUpgrade linux-image-azure-4.15Upgrade linux-image-azure-fips-4.15Upgrade linux-image-4.15.0-246-genericUpgrade linux-image-oracleUpgrade linux-image-aws-hweUpgrade linux-image-kvmUpgrade linux-image-aws-fipsUpgrade linux-image-4.15.0-246-lowlatencyUpgrade linux-image-oemUpgrade linux-image-4.15.0-1188-awsUpgrade linux-image-azureUpgrade linux-image-azure-fipsUpgrade linux-image-4.15.0-1170-kvmUpgrade linux-image-4.15.0-1143-fipsUpgrade linux-image-oracle-lts-18.04Upgrade linux-image-lowlatencyUpgrade linux-image-fipsUpgrade linux-image-4.15.0-1150-oracleUpgrade linux-image-4.15.0-2105-azure-fipsUpgrade linux-image-aws-4.15Upgrade linux-image-gcp-fipsUpgrade linux-image-4.15.0-2089-gcp-fipsUpgrade linux-image-gcp-fips-4.15Upgrade linux-image-gcp-4.15Upgrade linux-image-4.15.0-1196-azure | Nov 19, 2024 | Oct 21, 2024 |
| Vmware Photon_os | — | Use 'tdnf update' to upgrade all packages to the latest version. | May 27, 2026 | Oct 21, 2024 |
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub